PATENT APPLICATION 



WHAT IS CLAIMED IS: 



1. A computer-implemented method for enabling users to access a computer system, 
comprising: 

selecting a universal local user account of a computer system dependent upon user 
5 account selection information of a user, wherein the universal local user 

account has access privilege on the computer system; and 
mapping the user to the universal local user account. 



2. The method of claim 1 wherein said user account selection information includes at least one 
of directory services group membership information and access privilege information. 

10 3. The method of claim 1 wherein said selecting the universal user account includes correlating 

a universal local user account access level to a corresponding group membership of the user. 



4. The method of claim 1 wherein: 

the universal local user account is one of a plurality of universal local user 
accounts; and 

15 each one of said universal local user accounts has a respective access privilege 

level associated therewith. 



5. The method of claim 1, further comprising: 

creating said plurality of universal local user accounts prior to performing said 
selecting, 

20 wherein each one of said universal local user access accounts has a respective 

access privilege level associated therewith. 
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The method of claim 1, further comprising: 

determining a non-local status of the user with respect to the computer system; 
and 

authorizing access to the computer system in response to performing said 
determining; 

wherein said determining and said authorizing are both performed prior to said 
selecting; and 

wherein said mapping enables the user to access the computer system in 

accordance with an access privilege level corresponding to the universal local 
user account. 

The method of claim 6 wherein said authorizing access includes verifying that the user has an 
active account on a shared directory service manager. 

The method of claim 1 wherein several users can be simultaneously mapped to the universal 
local user account for enabling simultaneous access by each one of said users to the computer 
system. 
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9. A computer-implemented method for enabling users to access a computer system, 
comprising: 

determining a non-local status of a user with respect to a computer system; and 
associating the user with a universal local user account after said determining, 
5 wherein the universal local user account has access privilege on the computer 

system. 

10. The method of claim 9, further comprising: 

determining group membership affiliations of the user; wherein said associating is 
performed dependent upon said group membership affiliations of the user. 

10 11. The method of claim 9 wherein said associating includes correlating a universal local user 

account access level to a corresponding access level of a group membership of the user. 

12. The method of claim 9 wherein: 

the universal local user account is one of a plurality of universal local user 
accounts; and 

15 each one of said universal local user accounts has a respective access privilege 

level associated therewith. 



13. The method of claim 9, further comprising: 

creating said plurality of universal local user accounts prior to performing said 
selecting, wherein each one of said universal local user access accounts has a 
20 respective access privilege level associated therewith. 



14. The method of claim 9 wherein said associating includes: 
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selecting the universal local user account dependent upon user account selection 

information of the user; and 
mapping the user to the universal local user account. 

15. The method of claim 14 wherein said user account selection information includes at least one 
of directory services group membership information and access privilege information. 

16. The method of claim 14 wherein said selecting the universal user account includes 
correlating a universal local user account access level to an access level of a group 
membership of the user. 

17. The method of claim 14 wherein said mapping enables the user to access the computer 
system in accordance with an access privilege level corresponding to the universal local user 
account. 

18. The method of claim 17, further comprising: 

verifying that the user has an active account on a shared directory service manager 
prior to performing said mapping. 

19. The method of claim 9 wherein several users can be simultaneously mapped to the universal 
local user account for enabling simultaneous access by each one of said users to the computer 
system. 
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20. A computer system, comprising: 

at least one data processing device; 

instructions processable by said at least one data processing device; and 
an apparatus from which said instructions are accessible by said at least one data 
processing device; 

wherein said instructions are configured for enabling said at least one data 
processing device to facilitate: 

selecting a universal local user account of a computer system dependent 
upon user account selection information of a user, wherein the 
universal local user account has access privilege on the computer 
system; and 

mapping the user to the universal local user account. 



21 . The computer system of claim 20 wherein said user account selection information includes at 
least one of directory services group membership information and access privilege 
information. 



22. The computer system of claim 20 wherein said selecting the universal user account includes 
correlating a universal local user account access level to a corresponding group membership 
of the user. 



23. The computer system of claim 20 wherein: 

the universal local user account is one of a plurality of universal local user 
accounts; and 
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each one of said universal local user accounts has a respective access privilege 
level associated therewith. 



24. The computer system of claim 20 wherein said instructions are further configured for 
enabling said at least one data processing device to facilitate: 

creating said plurality of universal local user accounts prior to performing said 
selecting, 

wherein each one of said universal local user access accounts has a respective 
access privilege level associated therewith. 



25. The computer system of claim 20 wherein said instructions are further configured for 
enabling said at least one data processing device to facilitate: 

determining a non-local status of the user with respect to the computer system; 
and 

authorizing access to the computer system in response to performing said 
determining; 

wherein said determining and said authorizing are both performed prior to said 
selecting; and 

wherein said mapping enables the user to access the computer system in 

accordance with an access privilege level corresponding to the universal local 
user account. 



26. The computer system of claim 25 wherein said authorizing access includes verifying that the 
user has an active account on a shared directory service manager. 

27. The computer system of claim 20 wherein several users can be simultaneously mapped to the 
universal local user account for enabling simultaneous access by each one of said users to the 
computer system. 
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28. A computer system, comprising: 

at least one data processing device; 

instructions processable by said at least one data processing device; and 
an apparatus from which said instructions are accessible by said at least one data 
processing device; 

wherein said instructions are configured for enabling said at least one data 
processing device to facilitate: 

determining a non-local status of the user with respect to a computer 
system; and 

associating the user with a universal local user account after said 
determining, wherein the universal local user account has access 
privilege on the computer system. 



29. The computer system of claim 28 wherein said instructions are further configured for 
enabling said at least one data processing device to facilitate: 

determining group membership affiliations of the user; wherein said associating is 
performed dependent upon said group membership affiliations of the user. 



30. The computer system of claim 28 wherein said associating includes correlating a 
universal local user account access level to a corresponding access level of a group 
membership of the user. 



31. The computer system of claim 28 wherein: 

the universal local user account is one of a plurality of universal local user 
accounts; and 

each one of said universal local user accounts has a respective access privilege 
level associated therewith. 
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32. The computer system of claim 28 wherein said instructions are further configured for 
enabling said at least one data processing device to facilitate: 

creating said plurality of universal local user accounts prior to performing said 
selecting, wherein each one of said universal local user access accounts has a 
respective access privilege level associated therewith. 

33. The computer system of claim 28 wherein said associating includes: 

selecting the universal local user account dependent upon user account selection 

information of the user; and 
mapping the user to the universal local user account. 

34. The computer system of claim 33 wherein said user account selection information includes at 
least one of directory services group membership information and access privilege 
information. 

35. The computer system of claim 33 wherein said selecting the universal user account includes 
correlating a universal local user account access level to an access level of a group 
membership of the user. 

36. The computer system of claim 33 wherein said mapping enables the user to access the 
computer system in accordance with an access privilege level corresponding to the universal 
local user account. 

37. The computer system of claim 36 wherein said instructions are further configured for 
enabling said at least one data processing device to facilitate verifying that the user has an 
active account on a shared directory service manager prior to performing said mapping. 
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38. The computer system of claim 28 wherein several users can be simultaneously mapped to the 
universal local user account for enabling simultaneous access by each one of said users to the 
computer system. 
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